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Abstract of EP1 079628 

After a user terminal (200) executes a data usage 
accounting procedure for a contents provider 
(100) enciphered copyrighted digital data (K(D)) 
generated by enciphering chargeable copyrighted 
digital data (D) using encryption key data (K), 
digital sample preview data (S(D)) generated 
from an outline of the copyrighted digital data at a 
non-chargeable level without enciphering, 
decryption key data (Kd) for deciphering the 
enciphered copyrighted digital data, and 
additional data (AD) required for accounting are 
transmitted from the contents provider (100) to 
the user terminal (200) over a network. 
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(54) Copyrighted digital data management method and system 

(57) After a user terminal (200) executes a data 
usage accounting procedure for a contents provider 
(100), enciphered copyrighted digital data (K(D)) gener- 
ated by enciphering chargeable copyrighted digital data 
(D) using encryption key data (K), digital sample pre- 
view data (S(D)) generated from an outline of the copy- 
righted digital data at a non-chargeable level without 
enciphering, decryption key data (Kd) for deciphering 
the enciphered copyrighted digital data, and additional 
data (AD) required for accounting are transmitted from 
the contents provider (100) to the user terminal (200) 
over a network. 
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Description 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

[0001] The present invention relates to a copy- 
righted digital data management method, a contents 
provider, a user terminal, and a data-recording medium 
for managing copyrights during the use, storage, copy, 
and transfer of copyrighted digital data such as video, 
sound, and computer software. 

2. Description of the Related Art 

[0002] As the digital data age has arrived, various 
systems for providing the user with copyrighted digital 
data, such as video, sound, and computer software, 
over the Internet have been developed. 
[0003] For example, in the cable broadcasting 
transmission system and method disclosed in Japanese 
Patent Laid-Open Publication No. Hei 10-257466, a 
data provider sends preview video before the user is 
going to select video data to be played back so that the 
user can examine the content before agreeing to pay for 
it. 

[0004] FIG. 1 is a diagram showing the configuration 
of a cable broadcasting transmission system and 
method in the prior art. 

[0005] The conventional cable broadcasting trans- 
mission system and method in FIG.1, disclosed in Jap- 
anese Patent Laid-Open Publication No. Hei 10- 
257466, will be outlined below. 

[0006] A data transmission central station 1 01 com- 
prises a transmitter/receiver 201, a control command 
processor 202, an accounting manager 203, a stream 
data generator 204, a video data storage unit 205, and 
an index data storage unit 206. The video data storage 
unit 205 and the index data storage unit 206 respec- 
tively store therein video data and index data com- 
pressed according to the MPEG (Moving Picture 
Experts Group) standard. The video data and index 
data are digital. 

[0007] In response to a playback request for video 
data from the user, the data transmission central station 
101 reads required(requested) data from the video data 
storage unit 205 and generates a video stream for pre- 
view via the stream data generator 204. More specifi- 
cally, the stream data generator 204 references the data 
stored in the index data storage unit 206, reads only the 
I frames (Intra-frames) from the video data storage unit 
205 beginning at the start of the content for use in pre- 
view to generate a preview video stream, and sends the 
preview video stream to the user terminal via the trans- 
mitter/receiver 201 . 

[0008] After that, the user views the preview video 
stream displayed on the terminal and, if that video data 
is the one the user wants to view, sends a message, 



indicating that the user agrees to pay for it, to the data 
transmission central station 101. Upon receiving this 
agreement message, the data transmission central sta- 
tion 101 reads all video data from the start and sends 

5 the full video stream to the user terminal. 

[0009] In the conventional cable broadcasting 
transmission system and method described above, the 
full video stream corresponding to the preview video 
stream is sent from the data transmission central station 

w 101 after the user views the preview and sends an 
agreement message to the data transmission central 
station 101. This gives the user a chance to record the 
full video stream onto a data recording medium 
attached to the terminal for later playback. 

75 [0010] Because the full video stream is digital data 
and therefore the quality is not degraded by repeated 
copy or transfer operations, there is a possibility that the 
user will make an illegal copy of the video stream and 
transfer it to other users. 

20 [0011] To avoid this illegal copy or transfer, copy- 
righted digital data, which is transferred from a contents 
provider (data provider) to the user's data terminal via 
the Internet, is encrypted with encryption key data. This 
method allows only the user, who agrees to pay for dig- 

25 ital data, to decipher the copyrighted digital data. 

SUMMARY OF THE INVENTION 

[0012] When cryptographic technology is applied to 
30 the conventional cable broadcasting transmission sys- 
tem, the first-level user who has agreed to pay for enci- 
phered copyrighted digital data can, of course, decipher 
it. However, there is no system which allows a legal 
copy to be transferred from the first- level user to the 
35 second-level user, from the second-level user to the 
third-level user, .... and from the (N-1 )th-level user to the 
Nth-level user and which can send both enciphered 
copyrighted digital data and preview video stream to the 
second-level, third-level, ... (N-l)th-level, and Nth-level 
40 users. 

[0013] Neither is there a system which can effi- 
ciently send both a preview video stream and enci- 
phered copyrighted digital data when transferring direct 
mail advertisement to a large number of users over the 
45 Internet. 

[0014] To solve the above problems, there is pro- 
vided a copyrighted digital data management method 
wherein, after a user terminal executes a data usage 
accounting procedure for a contents provider, enci- 

so phered copyrighted digital data generated by encipher- 
ing chargeable copyrighted digital data using encryption 
key data, digital sample preview data generated from an 
outline of the copyrighted digital data at a non-chargea- 
ble level without enciphering, decryption key data for 

55 deciphering the enciphered copyrighted digital data, 
and additional data required for accounting are trans- 
mitted from the contents provider to the user terminal 
over a network. 




3 EP 1 079 

[0015] In a preferred embodiment of the present 
invention, the user terminal is allowed to reproduce the 
digital sample preview data but, to reproduce the enci- 
phered copyrighted digital data, is required to decipher 
the enciphered copyrighted digital data with the decryp- 5 
tion key data. 

[0016] Furthermore, to solve the above problems, 
there is provided a copyrighted digital data manage- 
ment method wherein, after a first user terminal exe- 
cutes a data usage accounting procedure for a contents w 
provider, enciphered copyrighted digital data generated 
by enciphering chargeable copyrighted digital data 
using encryption key data, digital sample preview data 
generated from an outline of the copyrighted digital data 
at a non-chargeable level without enciphering, decryp- is 
tion key data for deciphering the enciphered copy- 
righted digital data, and additional data required for 
accounting are transmitted from the contents provider to 
the first user terminal over a network and recorded on a 
data recording medium in the first user terminal, and 20 
wh rein, when the data recorded on the data recording 
me^um in the first user terminal is copied to a data 
recording medium in a second user terminal over the 
network, the enciphered copyrighted digital data, the 
digital sample preview data, and the additional data are 25 
transmitted from the first user terminal to the second 
user terminal over the network or a leased line. 
[0017] In a preferred embodiment of the present 
invention, the first user terminal does not transmit the 
decryption key data to the second user terminal. 30 
[0018] In a preferred embodiment of the present 
invention, after the second user terminal executes the 
data usage accounting procedure for the contents pro- 
vider, the contents provider transmits the decryption key 
data for deciphering the enciphered copyrighted digital 35 
data to the second user terminal over the network. 
[0019] In a preferred embodiment of the present 
invention, the first user terminal is allowed to reproduce 
the digital sample preview data but, to reproduce the 
enciphered copyrighted digital data, is required to deci- 40 
pher the enciphered copyrighted digital data with the 
decryption key data, and the second user terminal is 
allowed to reproduce the digital sample preview data 
but, to reproduce the enciphered copyrighted digital 
data, is required to obtain the decryption key data from 45 
the contents provider and then decipher the enciphered 
copyrighted digital data with the decryption key data. 
[0020] To solve the above problems, there is pro- 
vided a copyrighted digital data management method 
wherein enciphered copyrighted digital data generated so 
by enciphering chargeable copyrighted digital data 
using encryption key data, digital sample preview data 
generated from an outline of the copyrighted digital data 
at a non-chargeable level without enciphering, and addi- 
tional data required for accounting are transmitted from 55 
a contents provider to at least one user terminal over a 
network. 

[0021] In a preferred embodiment of the present 
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invention, after the user terminal executes a data usage 
accounting procedure for the contents provider, the con- 
tents provider transmits decryption key data for deci- 
phering the enciphered copyrighted digital data to the 
user terminal over the network. 

[0022] In a preferred embodiment of the present 
invention, the user terminal is allowed to reproduce the 
digital sample preview data but, to reproduce the enci- 
phered copyrighted digital data, is required to obtain the 
decryption key data from the contents provider and then 
decipher the enciphered copyrighted digital data with 
the decryption key data. 

[0023] To solve the above problems, there is pro- 
vided a contents provider comprising receiving means 
for receiving a data usage accounting procedure from a 
user terminal; and transmitting means for transmitting 
enciphered copyrighted digital data generated by enci- 
phering chargeable copyrighted digital data using 
encryption key data, digital sample preview data gener- 
ated from an outline of the copyrighted digital data at a 
non-chargeable level without enciphering, decryption 
key data for deciphering the enciphered copyrighted 
digital data, and additional data required for accounting 
to the user terminal over a network, the data being all 
transmitted when the data usage accounting procedure 
is received from the user terminal. 
[0024] Furthermore, to solve the above problems, 
there is provided a contents provider comprising trans- 
mitting means for transmitting enciphered copyrighted 
digital data generated by enciphering chargeable copy- 
righted digital data using encryption key data, digital 
sample preview data generated from an outline of the 
copyrighted digital data at a non-chargeable level with- 
out enciphering, and additional data required for 
accounting, to at least one user terminal over a network. 
[0025] In a preferred embodiment of the present 
Invention, the contents provider further comprises 
receiving means for receiving a data usage accounting 
procedure from the user terminal, and, when the 
accounting procedure is received from the user termi- 
nal, the transmitting means transmits decryption key 
data for deciphering the enciphered copyrighted digital 
data to the user terminal over the network. 
[0026] To solve the above problems, there is pro- 
vided a user terminal comprising transmitting means for 
transmitting a data usage accounting procedure to a 
contents provider; receiving means for receiving enci- 
phered copyrighted digital data generated by encipher- 
ing chargeable copyrighted digital data using encryption 
key data, digital sample preview data generated from an 
outline of the copyrighted digital data at a non-chargea- 
ble level without enciphering, decryption key data for 
deciphering the enciphered copyrighted digital data, 
and additional data required for accounting, from the 
contents provider over a network after the accounting 
procedure is executed for the contents provider; record- 
ing means for recording in a data recording means the 
enciphered copyrighted digital data, digital sample pre- 
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view data, decryption key data, and additional data 
received by the receiving means; reproducing means 
for reproducing the digital sample preview data 
recorded in the data recording means; and deciphering 
means for deciphering the enciphered copyrighted dig- 5 
ital data recorded in the data recording means. 
[0027] In a preferred embodiment of the present 
invention, out of the data recorded in the data recording 
medium, the enciphered copyrighted digital data, digital 
sample preview data, and additional data may be cop- w 
ied to other user terminals. 

[0028] To solve the above problems, there is pro- 
vided a user terminal comprising receiving means for 
receiving enciphered copyrighted digital data generated 
by enciphering chargeable copyrighted digital data is 
using encryption key data, digital sample preview data 
generated from an outline of the copyrighted digital data 
at a non-chargeable level without enciphering, and addi- 
tional data required for accounting, from a contents pro- 
vider over a network; recording means for recording the 20 
enciphered copyrighted digital data, the digital sample 
preview data, and the additional data in a data recording 
means; reproducing means for reproducing the digital 
sample preview data recorded in the data recording 
means; transmitting means for transmitting a data 2s 
usage accounting procedure to the contents provider; 
and deciphering means for deciphering the copyrighted 
digital data using decryption key data after the transmit- 
ting means transmits the accounting procedure to the 
contents provider and, in response, the receiving 30 
means receives from the contents provider the decryp- 
tion key data for deciphering the enciphered copy- 
righted digital data over the network. 
[0029] To solve the above problems, there is pro- 
vided a data recording medium recording therein enci- 35 
phered copyrighted digital data generated by 
enciphering chargeable copyrighted digital data using 
encryption key data, digital sample preview data gener- 
ated from an outline of the copyrighted digital data at a 
non-chargeable level without enciphering, decryption 40 
key data for deciphering the enciphered copyrighted 
digital data, and additional data required for accounting.- 
[0030] To solve the above problems, there is pro- 
vided a data recording medium recording therein enci- 
phered copyrighted digital data generated by 45 
enciphering chargeable copyrighted digital data using 
encryption key data, digital sample preview data gener- 
ated from an outline of the copyrighted digital data at a 
non-chargeable level without enciphering, and addi- 
tional data required for accounting. so 
[0031] The nature, principle and utility of the inven- 
tion will become more apparent from the following 
detailed description when read in conjunction with the 
accompanying drawings. 

55 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0032] In the accompanying drawings: 



FIG.1 is a configuration diagram showing a cable 
broadcasting transmission system and method in 
the prior art; 

FIG. 2 is a diagram conceptually showing a copy- 
righted digital data management method, a con- 
tents provider, user terminals, and data recording 
media according to the present invention; 
FIG.3 is a diagram showing the configuration of the 
contents provider; 

FIG.4 is a diagram showing the configuration of 
user terminal A which is a first-level user terminal of 
copyrighted digital data provided by the contents 
provider; 

FIG. 5 is a diagram showing the configuration of 
user terminal B, which is a second-level user termi- 
nal indirectly using copyrighted digital data via user 
terminal A which is a first-level user terminal; 
FIG. 6 is a diagram showing how copyrighted digital 
data is used indirectly in user terminal A; and 
FIG.7 is a diagram conceptually showing a modifi- 
cation of the copyrighted digital data management 
method, contents provider, user terminals, and data 
recording media according to the present invention. 

DESCRIPTION OF THE PREFERRED EMBODI- 
MENTS 

[0033] One embodiment of a copyrighted digital 
data management method, a contents provider, a user 
terminal, and a data-recording medium according to the 
present invention will be described in detail below with 
reference to FIGS.2 to 6. 

[0034] Referring to FIG.2,a contents provider 100 
which is a data provider, user terminal A 200 which is a 
first-level user terminal of digital data provided by the 
contents provider, and user terminal B 300 which is a 
second-level user terminal using data copied from user 
terminal A 200 are related in the copyrighted digital data 
management method according to the present invention 
as shown in the figure. It is assumed that copyrighted 
digital data is sent or received over a network, espe- 
cially, over the Internet. 

[0035] First, user terminal A 200, a first-level user 
terminal which uses first-level copyrighted digital data 
provided by the contents provider, will be described. 
[0036] In FIG. 2, a large-capacity recording medium 
installed in the contents provider stores therein copy- 
righted digital data D which is copyrighted and chargea- 
ble, digital sample preview data S(D) generated, without 
deciphering, at non-chargeable level by obtaining a 
non-chargeable amount of copyrighted digital data D or 
by degrading copyrighted digital data D to a non- 
chargeable level, unique encryption key data K which is 
used to encipher the copyrighted digital data D, decryp- 
tion key data Kd which is used to decipher the copy- 
righted digital data D, and additional data AD which 
contains accounting data required for using copyrighted 
digital data D and usage condition data The copy- 
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righted digital data D includes image data, sound data, 
computer software, and so on. The additional data AD 
may be included in the digital sample data S(D). 
[0037] Upon receiving a usage request from user 
terminal A, the contents provider executes the account- 5 
ing procedure required for using data based on user 
data, checks if user terminal A is allowed to use data 
and, if allowed, terminates the accounting procedure for 
user terminal A. Then, the contents provider reads the 
required copyrighted digital data D and the unique 
encryption key data K from the large-capacity recording 
medium and enciphers the copyrighted digital data D 
using the unique encryption key data K to generate 
enciphered copyrighted digital data K(D). At the same 
time, the contents provider reads the digital sample pre- 
view data S(D), decryption key data Kd, and additional 
data AD. 

[0038] After that, the contents provider sends the 
enciphered copyrighted digital data K(D) obtained from 
enciphering, digital sample preview data S(D), decryp- 
tio&ey data Kd required for deciphering the enciphered 
cof«5righted digital data K(D), and additional data AD to 
user terminal A over the network. At this time, the 
decryption key data Kd required for deciphering may be 
enciphered using, for example, the user data (ID data) 
on user terminal A before sending the above data. 
[0039] User terminal A 200 receives from the con- 
tents provider 100 the enciphered copyrighted digital 
data K(D), digital sample preview data S(D), decryption 
key data Kd for deciphering the enciphered copyrighted 
digital data K(D), and additional data AD including the 
required accounting data and usage conditions, and 
records the received data on the data recording medium 
in user terminal A. At this time, the decryption key data 
Kd is recorded basically in an area, not intentionally 
accessible to the general user, in the data recording 
medium in user terminal A. The digital sample preview 
data S(D) and the additional data AD are recorded on 
the data recording medium so that they may be repro- 
duced first 

[0040] To use the enciphered copyrighted digital 
data K(D) recorded on the data recording medium in 
user terminal A, the user must decipher the enciphered 
copyrighted digital data K(D) using the decryption key 
data Kd recorded at the same time. Of course, the dig- 
ital sample preview data S(D) recorded on the data 
recording medium may be viewed on user terminal A to 
examine the outline of the enciphered copyrighted dig- 
ital data K(D). The additional data AD recorded on the 
data recording medium in user terminal A may be used, 
as necessary, by user terminal A which is a first-level 
user terminal. This additional data AD is used primarily 
when data is provided to user terminal B which is a sec- 
ond-level user. 

[0041] Next, user terminal B 300 will be described. 
User terminal B 300 is a second-level user terminal 
which indirectly uses copyrighted digital data via user 
terminal A which directly uses copyrighted digital data 



provided by the contents provider. 
[0042] While user terminal A is a first-level user ter- 
minal which receives copyrighted digital data directly 
from the contents provider according to the regular pro- 
cedure, user terminal B is a second-level user terminal 
which copies the copyrighted digital data from user ter- 
minal A for indirect use. 

[0043] User terminal A and user terminal B may be 
connected via a network or a leased (private) line. User 
terminal B is able to copy copyrighted digital data 
owned by user terminal A. It should be noted that, at this 
time, the decryption key data Kd for deciphering the 
enciphered copyrighted digital data K(D) recorded on 
the data recording medium in user terminal A is not out- 
put to user terminal B. From user terminal A, only the 
enciphered copyrighted digital data K(D), digital sample 
preview data S(D), and additional data AD including 
required accounting data and usage conditions are sent 
to user terminal B as copy data. These are copied onto 
the data-recording medium in user terminal B. 
[0044] User terminal B, a second-level user termi- 
nal, may copy the enciphered copyrighted digital data 
K(D), digital sample preview data S(D), and additional 
data AD including required accounting data and usage 
conditions from the user terminal A, a first- level user ter- 
minal. However, out of the copied data, user terminal B 
may try only the digital sample preview data S(D) as a 
sample. When the user at user terminal B previews the 
digital sample preview data S(D) and wants to view the 
enciphered copyrighted digital data K(D), he or she 
must check the additional data AD or the digital sample 
preview data S(D) containing the additional data AD to 
find the accounting contents provider. For the account- 
ing contents provider, user terminal B executes the reg- 
ular usage procedure to obtain only the decryption key 
data Kd that will be used to decipher the enciphered 
copyrighted digital data K(D). This decryption key data 
Kd, obtained from the contents provider, enables user 
terminal B to decipher the enciphered copyrighted dig- 
ital data K(D). 

[0045] Next, the indirect use of copyrighted digital 
data executed by user terminal A will be described. In 
the description below, assume that the enciphered cop- 
yrighted digital data K(D), digital sample preview data 
S(D), decryption key data Kd used to decipher the enci- 
phered copyrighted digital data K(D), and additional 
data AD including the required accounting data and 
usage conditions are already obtained from the con- 
tents provider according to the regular procedure and 
recorded in the recording medium in user terminal A. In 
this state, when moving the data from the recording 
medium to a large-capacity data recording medium (for 
example, a hard disk, optical disc) in the same terminal, 
only the enciphered copyrighted digital data K(D) and 
the digital sample preview data S(D) are moved. And, 
out of the enciphered copyrighted digital data K(D) and 
the digital sample preview data S(D) that have been 
moved to the hard disk or the optical disc in the same 
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terminal, user terminal A may use only the digital sam- 
ple preview data S(D). This digital sample preview data 
S(D) may be used to manage the copyrighted digital 
data. 

[0046] The decryption key data Kd which was not 
moved to the large-capacity data recording medium is 
stored in a memory in user terminal A where data 
unique to user terminal A is stored. 
[0047] When the copyrighted digital data stored and 
managed on the hard disk or the optical disc is returned 
to the data recording medium, the decryption key data 
Kd corresponding to the enciphered copyrighted digital 
data K(D) is read from the memory to decipher the enci- 
phered copyrighted digital data K(D) for late use. 
[0048] Furthermore, the contents provider may be 
provided with a recorder/reproducer and a recording 
medium with which associated user data, such as the 
user terminal A accounting data and usage data, is 
managed. This capability allows the enciphered copy- 
righted digital data K(D) to be used by simply obtaining 
the decryption key data Kd, thus eliminating the need 
for downloading the accounting data and all copyrighted 
digital data even when the decryption key data Kd is 
erased from the memory of user terminal A. 
[0049] The user who owns user terminal A may 
copy the copyrighted digital data to a terminal other than 
user terminal A in the same way the copyrighted digital 
data is copied to user terminal B. When copying the 
copyrighted digital data from user terminal B to user ter- 
minal C, from user terminal C to user terminal D, ... , 
from user terminal (N-1) to user terminal N, the enci- 
phered copyrighted digital data K(D), digital sample pre- 
view data S(D), and additional data AD may be copied. 
The decryption key data Kd used to decipher the enci- 
phered copyrighted digital data K(D) should be obtained 
by finding the accounting contents provider. 
[0050] Next, an example of the contents provider 
described above will be described with reference to 
FIG.3. As shown in FIG. 3, a contents provider 100 com- 
prises a receiver 1 receiving data from a user terminal 
over a network (line), a data output checker 2 checking 
whether or not the copyrighted digital data D requested 
by a user terminal is to be output, a user manager 3 
storing therein user data for management, a large- 
capacity recording medium 4 for recording user data 
therein, a contents manager 5 storing therein and man- 
aging copyrighted digital data D, encryption key genera- 
tion data PKe unique to the copyrighted digital data D, 
and additional data AD, a large-capacity recording 
medium 6 for storing contents therein, a digital data 
reader 7 reading copyrighted digital data from the large- 
capacity content-storing recording medium 6 based on 
the checking result of the data output checker 2, an 
encryption key generator 9 generating encryption key 
data K on copyrighted digital data D based on the 
encryption key generation data PKe, an enciphering 
processor 10 enciphering copyrighted digital data D 
using the generated encryption key data K to generate 



enciphered copyrighted digital data K(D), a decryption 
key data generator 1 1 generating a decryption key data 
Kd that will be used to decipher the enciphered copy- 
righted digital data K(D), a data converter 1 3 converting, 

5 without enciphering, an outline to non-chargeable digital 
sample preview data S(D) by obtaining a non-chargea- 
ble amount of the copyrighted digital data D or by 
degrading the copyrighted digital data D to a non- 
chargeable level, and a transmitter 15 transmitting the 

ro digital data (transmission data 24) to an user terminal at 
a time. 

[0051] The contents provider 100, a data provider, 
has MPEG2-coded copyrighted video data stored in the 
large-capacity recording medium 6. In addition, unique 

is encryption key generation data PKe and the additional 
data AD composed of condition data for generating non- 
chargeable data from an MP EG 2 stream of video data 
and accounting data necessary for using copyrighted 
digital data are attached to each piece of video data and 

20 are stored also in the large-capacity recording medium 
6. 

[0052] First, the receiver 1 receives a contents 
usage request and unique identification data (ID data) 
for identifying the user terminal from a user terminal. 

25 Based on the user data received by the receiver 1 , the 
data output checker 2 checks if the requested contents 
may be output This checking is made based on the 
data usage limit data included in the user data pre- 
sto red in the large-capacity recording medium 4 man- 

30 aged by user manager 3 and the contents value data 
recorded in the large-capacity recording medium 6 
managed by the content manager 5. If the numeric 
value of the limit the user terminal may use is larger 
than the numeric value of the contents value data, the 

35 data output checker 2 allows the digital data reader 7 to 
read the contents from the large-capacity recording 
medium 6. If the numeric value of the limit is smaller 
than the numeric value of the contents value data but if 
the contents provider is able to charge the user terminal 

40 properly, the data output checker 2 also allows the dig- 
ital data reader 7 to read the contents. 
[0053] Digital data 8 read by the digital data reader 
7 comprises the encryption key generation data PKe, 
copyrighted digital data D, and additional data AD. 

45 [0054] Based on the encryption key generation data 
PKe, the encryption key generator 9 generates unique 
encryption key data K used to encipher the copyrighted 
digital data D. It is to be understood that the copyrighted 
digital data D is enciphered using DES (Data Encryption 

so Standard), one of block cipher methods, and therefore 
the encryption key data K generated by the encryption 
key generator 9 is 64 bits long. The enciphering proces- 
sor 1 0 uses the encryption key data K to encipher, via 
DES, the MP EG 2 stream of copyrighted digital data D, a 

55 64-b'rt block at a time. 

[0055] In general, the encryption key data K and the 
decryption key data Kd used for DES enciphering 
processing are the same or complementary. Therefore, 
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the decryption key data generator 1 1 performs conver- 
sion processing or encipheringprocessing based on the 
encryption key data K and user key data 12 unique to 
each user terminal to generate the decryption key data 
Kd. 

[0056] The data converter 13 increases the com- 
pression ratio of the MPEG data of the copyrighted dig- 
ital data D to generate non-chargeable digital sample 
preview data S(D) set up by the copyright owner or con- 
tents provider. This digital sample preview data S(D) is 
used for preview. 

[0057] Thus, transmission data 14 comprises the 
decryption key data Kd, enciphered copyrighted digital 
data K(D), digital sample preview data S(D), and addi- 
tional data AD. This transmission data is sent from the 
transmitter 15 to a user terminal (for example, user ter- 
minal A), which is a first-level user terminal, over the tel- 
ephone line, Internet, or broadcasting satellite. 
[0058] After transmitting the digital data (transmis- 
sion data 14), the transmitter 15 outputs transmission 
dajj 16 to the user manager 3. Based on this transmis- 
sion data 16, the user manager 3 updates the data 
usage limit data and the data output history data of the 
user data stored in the large-capacity recording medium 
4. 

[0059] Next, a user terminal A 200, a first user ter- 
minal of the copyrighted digital data D provided by the 
contents provider 1 00, will be described with reference 
to FIG .4. 

[0060] As shown in FIG. 4, the user terminal A 200 
comprises an operation unit 17 used by the user to 
operate the terminal, a controller 1 8 controlling the ter- 
minal, a unique data memory 19 storing therein identifi- 
cation data unique to the terminal, a transmitter 20 
transmitting a contents usage request, a data usage 
accounting procedure, and user data to the contents 
provider 100, a receiver 21 receiving digital data from 
the contents provider 100, a removable recording 
medium 24 used for recording the received digital data, 
a recorder 23 recording the digital data on the remova- 
ble recording medium 24, a reader 25 reading the digital 
data from the removable recording medium 24. a 
decryption key generator 28 generating the decryption 
key data Kd of the enciphered copyrighted digital data 
K(D) from the data that is read, a deciphering processor 
29 deciphering the enciphered copyrighted digital data 
K(D) using the generated decryption key data Kd, a D/A 
converter 30 D/A-converting the deciphered copy- 
righted digital data D, a display unit 31 displaying the 
converted copyrighted data, an output processor 32 
outputting the digital data that is read including the enci- 
phered copyrighted digital data K(D), digital sample pre- 
view data S(D), and additional data AD, but not 
including the decryption key data Kd, to an output unit 
34, and an output unit 34 outputting digital data 33 to 
other data recording/reproduction terminals. 
[0061] In response to a request from the operation 
unit 17, the controller 18 outputs a usage request, as 



well as unique data read from the unique data memory 
1 9, to the transmitter 20. The transmitter 20 sends them 
to the contents provider 1 00. 

[0062] The receiver 21 receives digital data from 
5 the contents provider 100. Received digital data 22 
comprises the enciphered copyrighted digital data K(D), 
decryption key data Kd used to decipher the enciphered 
copyrighted digital data K(D), digital sample preview 
data S(D) generated by obtaining a non-chargeable 
io amount of copyrighted digital data D or by degrading 
copyrighted digital data D to a non-chargeable level, 
and additional data AD including required accounting 
data and usage conditions. 

[0063] The received digital data 22 is recorded 
is once on the removable recording medium 24 by the 
recorder 23. 

[0064] The digital data recorded on the removable 
recording medium 24 is read by the reader 25 at repro- 
duction time. The digital data 26 that is read comprises 
20 the decryption key data Kd, enciphered copyrighted dig- 
ital data K(D), digital sample preview data S(D), and 
additional data AD. 

[0065] Based on user key data 27 that is read from 
the unique data memory 19, the decryption key genera- 
ls tor 28 generates the decryption key data Kd for use in 
deciphering the enciphered copyrighted digital data 
K(D). This generation is the reverse processing of the 
decryption key data generator 1 1 shown in FIG. 3. That 
is, if replacement was done, reverse-replacement is per- 
30 formed based on the user key data 27. 

[0066] The deciphering processor 29 deciphers the 
enciphered copyrighted digital data K(D) using the 
decryption key data Kd generated by the decryption key 
generator 28. if enciphering was done using the DES 
35 enciphering method, deciphering is done by reversing 
the method. 

[0067] The deciphered copyrighted digital data D is 
converted by the D/A converter 30 from digital signals to 
analog signals which are output to the display unit 31 . 

40 [0068] The display unit 31 is a monitor when the 
copyrighted data is video, and a speaker when the cop- 
yrighted data is sound. Similarly, the digital sample data 
S(D) may be converted by the D/A converter to analog 
signals for display on the display unit 31 . 

45 [0069] The additional data AD includes usage con- 
dition data. The controller 18 controls the terminal 
based on this data. 

[0070] On the other hand, when the user terminal A 
200 performs indirect use of the data to copy the 

so received digital data 22, obtained from the contents pro- 
vider 100, to the recording medium of some other unit or 
terminal, the output processor 32 outputs the output 
digital data 33 to the output unit 34. This output digital 
data 33 comprises the enciphered copyrighted digital 

55 data K(D), digital sample preview data S(D), and addi- 
tional data AD that are included in the reproduced digital 
data 26 read from the removable recording medium 24 
by the reader 25. The output unit 34 outputs the output 
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digital data 33 to other units or terminals over the net- 
work or the leased line. 

[0071] Next, user terminal B 300 will be described 
with reference to FIG. 5. The user terminal B 300 is a 
second-level user terminal which indirectly uses copy- 5 
righted digital data via the user terminal A 200, a first- 
level user terminal receiving copyrighted digital data 
from the contents provider 1 00. 

[0072] The user terminal B 300 receives digital 
data, output from the output unit 34 in the user terminal w 
A 200, via a receiver 37 over the network or the leased 
line. 

[0073] Received data 38 comprises the enciphered 
copyrighted digital data K(D), digital sample preview 
data S(D), and additional data AD. This data is once is 
recorded on a removable recording medium 41 by a 
recorder 39. 

[0074] When reading digital data from the remova- 
ble recording medium 41, reproduced digital data 42 
read by a reader 40 comprises the enciphered copy- 20 
righted digital data K(D), digital sample preview data 
S(D), and additional data AD. Out of them, the user ter- 
minal B 300 may use only the digital sample preview 
data S(D) and the additional data AD. 
[0075] The digital sample preview data S(D) and 25 
the additional data AD are converted by a D/A converter 
43 from digital signals to analog signals and is displayed 
on a display 44. 

[0076] Based on the digital sample preview data 
S(D) displayed on the display 44, the user at the user 30 
terminal B 300 decides whether the enciphered copy- 
righted digital data K(D) is necessary. Then, the user 
may obtain the decryption key data Kd of the enci- 
phered copyrighted digital data K(D), which is available 
for a charge, from the contents provider 1 00. 35 
[0077] To obtain the decryption key data Kd, a con- 
troller 36 transmits decryption key request data entered 
from an operation unit 35 and user identification data 
read from a unique data memory 45 to the contents pro- 
vider 1 00 via a transmitter 46. The data is sent over the 40 
telephone line, Internet, or leased line. 
[0078] The contents provider 100 checks the user 
terminal B 300 if the terminal will pay for the data. If it is 
determined that the decryption key data Kd may be sent 
to the terminal, the contents provider sends the decryp- 45 
tion key data Kd over the telephone line, Internet, satel- 
lite line, or leased line. The user terminal B 300 receives 
the decryption key data Kd via a receiver 47. 
[0079] A decryption key generator 48 generates a 
decryption key from the decryption key data Kd so 
received by the receiver 47 and user key data stored in 
the unique data memory 45. The generated decryption 
key is recorded by the recorder 39 into the removable 
recording medium 41. Also, the generated decryption 
key is output to a deciphering processor 49 for use in 55 
deciphering the enciphered copyrighted digital data 
K(D). 

[0080] The copyrighted digital data D deciphered by 



the deciphering processor 49 is converted by the D/A 
converter 43 from digital signals to analog signals and is 
output on the display 44. The display 44 outputs the 
data as video or sound. 

[0081] FIG.6 shows how digital data, obtained by 
user terminal A from the contents provider 100, is 
moved to some other recording medium for saving and 
management and how that digital data is returned to the 
original recording medium and terminal for playback. 
[0082] A removable recording medium 50 of a port- 
able data terminal 400 records therein digital data 
downloaded from the contents provider 100. 
[0083] The recorded digital data comprises enci- 
phered copyrighted digital data K(D), decryption key 
data Kd, digital sample preview data S(D), and addi- 
tional data AD. 

[0084] This digital data is moved to another unit 500 
in user terminal A for saving and managing. The unit 
500 used for saving and management is a PC (personal 
computer) containing a large-capacity recording 
medium 55 such as a hard disk or an optical disc. Data 
output from the terminal 400 comprises the enciphered 
copyrighted digital data K(D), digital sample preview 
data S(D), and additional data AD. 
[0085] At this time, the decryption key data Kd and 
the corresponding additional data AD are recorded on a 
unique data recording memory 52. 
[0086] The unit 500, which receives digital data 
from the terminal 400 for saving and management, 
records the enciphered copyrighted digital data K(D), 
digital sample preview data S(D), and additional data 
AD on a large-capacity recording medium 55. 
[0087] Other enciphered copyrighted digital data is 
also stored in the large-capacity recording medium 55. 
User terminal A manages copyrighted digital data K(D) 
using the digital sample data S(D). 
[0088] The digital sample preview data S(D) is a 
part of the copyrighted digital data D or a version of the 
copyrighted digital data D whose video and sound qual- 
ity is degraded. The digital sample preview data S(D), 
which is not enciphered, may be D/A-converted and 
then reproduced. 

[0089] When the user at user terminal A returns the 
digital data from the saving/management unit 500 to the 
terminal 400, the digital data is once recorded on the 
removable recording medium 50. If the decryption key 
data Kd is not included in the digital data when the dig- 
ital data is recorded on the medium, a unique data 
recording memory 52 is searched for the decryption key 
data Kd. The corresponding decryption key data Kd, if 
stored, is read and is recorded on the removable record- 
ing medium 50 with other digital data. 
[0090] The decryption key data Kd, if not stored in 
the unique data memory 52, may be downloaded from 
the contents provider 100. If the contents provider 100 
has already charged the user using the user data, the 
contents provider 100 does not change the user any 
more and allows the user to download and output the 
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decryption key data Kd. 
[0091 ] Next, a modification of the copyrighted digital 
data management method, contents provider, user ter- 
minal, and data recording medium according to the 
present invention will be described briefly with reference 
to FIG. 7. 

[0092] In the modification of the copyrighted digital 
data management method, contents provider, user ter- 
minal, and data recording medium according to the 
present invention, shown in FIG. 7, the copyrighted dig- 
ital data D is downloaded from the contents provider 
100', a data provider, to a plurality of user terminals 
200', 300*, such as user terminal A and user terminal B, 
as in direct mail advertisement In this case, the techni- 
cal concept of indirect use of data described above may 
be applied. 

[0093] That is, enciphered copyrighted digital data 
K(D) generated by enciphering the copyrighted digital 
data D chargeable by the contents provider 1 00' using 
the encryption key data K, digital sample preview data 
S((^ generated from the outline of the copyrighted dig- 
ital tiata at a non-chargeable level without enciphering, 
and additional data AD required for accounting are 
transmitted from the contents provider 100* to a plurality 
of user terminals over the network. The user at each 
user terminal views the digital sample preview data 
S(D). If the user wants to decipher the enciphered cop- 
yrighted digital data K(D), he or she executes the data 
usage accounting procedure for the contents provider 
100'. Then, the decryption key data Kd required for deci- 
phering the enciphered copyrighted digital data K(D)is 
transmitted from the contents provider 1 00' to each user 
terminal 200', 300' over the network to allow the user to 
legally decipher the enciphered copyrighted digital data 
K(D) using the decryption key data Kd. On the other 
hand, the contents provider 1 00' can prevent the illegal 
copy of copyrighted digital data. 
[0094] Of course, the user terminals may copy the 
enciphered copyrighted digital data K(D), digital sample 
preview data S(D), and additional data AD among them- 
selves. Even in this case, the user at each terminal may 
request the contents provider to transmit the decryption 
key data Kd. 

[0095] In the method according to the present 
invention, when the user at a first- level user terminal 
wants to download copyrighted digital data from the 
contents provider which is a data provider, the user at 
the user terminal executes the data usage accounting 
procedure for the contents provider. Then, the enci- 
phered copyrighted digital data generated by encipher- 
ing the chargeable copyrighted digital data using the 
encryption key data, digital sample preview data gener- 
ated from the outline of the copyrighted digital data at a 
non-chargeable level without enciphering, decryption 
key data for deciphering the copyrighted digitaJ data, 
and additional data required for accounting are trans- 
mitted from the contents provider to the user terminal 
over the network. This enables the user terminal to 



legally decipher the enciphered copyrighted digital data 
using the decryption key data. 

[0096] In addition, when digital data recorded on a 
data recording medium in a first user terminal, which is 
5 a first -level user terminal of the contents provider, is 
copied over the network to a second user terminal 
which is a second-level user, enciphered copyrighted 
digital data, digital sample preview data, and additional 
data are transmitted over the network to the second 
10 user terminal. The user at the second-level user termi- 
nal views the digital sample preview data. If the user at 
the second-level user terminal wants to decipher the 
enciphered copyrighted digital data, the user executes 
the data usage accounting procedure for the contents 
75 provider. Then, decryption key data required for deci- 
phering the enciphered copyrighted digital data is trans- 
mitted to the second-level user terminal over the 
network to allow the user to legally decipher the enci- 
phered copyrighted digital data using the decryption key 
20 data. This prevents the user at the second user terminal 
from obtaining unwanted data incorrectly and being 
charged for it. On the other hand, the contents provider 
which is a data provider can prevent the illegal copy of 
copyrighted digital data. In addition, allowing a non- 
25 chargeable sample to be made available during the indi- 
rect use of copyrighted digital data enables the contents 
provider to extensively distribute the provided data and 
to charge the user reliably. 

[0097] Furthermore, when the copyrighted digital 

30 data is downloaded from the contents provider, which is 
a data provider, to a plurality of user terminals as in 
direct mail advertisement, the technical concept of the 
indirect use of copyrighted digital data described above 
may be applied. That is, enciphered copyrighted digital 

35 data generated by enciphering the copyrighted digital 
data chargeable by the contents provider using the 
encryption key data, digital sample preview data gener- 
ated from the outline of the copyrighted digital data at a 
non-chargeable level without enciphering, and addi- 

40 tional data required for accounting are transmitted from 
the contents provider to a plurality of user terminals over 
the network. The user at each user terminal views the 
digital sample preview data. If the user wants to deci- 
pher the enciphered copyrighted digital data, he or she 

45 executes the data usage accounting procedure for the 
contents provider. Then, the decryption key data 
required for deciphering the enciphered copyrighted 
digital data is transmitted to each user terminal over the 
network to allow the user to legally decipher the enci- 

50 p he red copyrighted digital data using the decryption key 
data. On the other hand, the contents provider can pre- 
vent the illegal copy of copyrighted digital data. 
[0098] It should be understood that many modifica- 
tions and adaptations of the invention will become 

55 apparent to those skilled in the art and it is intended to 
encompass such obvious modifications and changes in 
the scope of the claims appended hereto. 
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Claims 

1. A copyrighted digital data management method 
wherein, after a user terminal (200) executes a data 
usage accounting procedure for a contents provider 5 
(100), enciphered copyrighted digital data (K(D)) 
generated by enciphering chargeable copyrighted 
digital data (D) using encryption key data (K), digital 
sample preview data (S(D)) generated from an out- 
line of the copyrighted digital data at a non-charge- 10 
able level without enciphering, decryption key data 
(Kd) for deciphering the enciphered copyrighted 
digital data, and additional data (AD) required for 
accounting are transmitted from said contents pro- 
vider (100) to said user terminal (200) over a net- 75 
work. 

2. The copyrighted digital data management method 
according to claim 1 , wherein said user terminal 
(200) is allowed to reproduce the digital sample 20 
preview data (S(D)) but, to reproduce the enci- 
phered copyrighted digital data (K(D)), is required 

to decipher the enciphered copyrighted digital data 
with the decryption key data (Kd). 

25 

3. A copyrighted digital data management method 
wherein, after a first user terminal (200) executes a 
data usage accounting procedure for a contents 
provider (100), enciphered copyrighted digital data 
(K(D)) generated by enciphering chargeable copy- 30 
righted digital data (D) using encryption key data 
(K), digital sample preview data (S(D)) generated 
from an outline of the copyrighted digital data at a 
non-chargeable level without enciphering, decryp- 
tion key data (Kd) for deciphering the enciphered 35 
copyrighted digital data, and additional data (AD) 
required for accounting are transmitted from said 
contents provider (100) to said first user terminal 
(200) over a network and recorded on a data 
recording medium in said first user terminal (200), 40 
and wherein, when the data recorded on said data 
recording medium in said first user terminal (200) is 
copied to a data recording medium in a second user 
terminal (300) over the network, the enciphered 
copyrighted digital data (K(D)), the digital sample 45 
preview data (S(D)), and the additional data (AD) 

are transmitted from said first user terminal (200) to 
said second user terminal (300) over the network or 
a leased line. 

50 

4. The copyrighted digital data management method 
according to claim 3 wherein said first user terminal 
(200) does not transmit the decryption key data 
(Kd) to said second user terminal (300). 

55 

5. The copyrighted digital data management method 
according to claim 3 wherein, after said second 
user terminal (300) executes the data usage 



accounting procedure for said contents provider 
(100), said contents provider (100) transmits the 
decryption key data (Kd) for deciphering the enci- 
phered copyrighted digital data (K(D)) to said sec- 
ond user terminal (300) over the network. 

6. The copyrighted digital data management method 
according to claim 5 wherein said first user terminal 
(200) is allowed to reproduce the digital sample 
preview data (S(D)) but, to reproduce the enci- 
phered copyrighted digital data (K(D)), is required 
to decipher the enciphered copyrighted digital data 
with the decryption key data (Kd), 

and wherein said second user terminal (300) is 
allowed to reproduce the digital sample preview 
data (S(D)) but, to reproduce the enciphered copy- 
righted digital data (K(D)), is required to obtain the 
decryption key data (Kd) from said contents pro- 
vider (100) and then decipher the enciphered copy- 
righted digital data (K(D)) with the decryption key 
data (Kd). 

7. A copyrighted digital data management method 
wherein enciphered copyrighted digital data (K(D)) 
generated by enciphering chargeable copyrighted 
digital data (D) using encryption key data (K), digital 
sample preview data (S(D)) generated from an out- 
line of the copyrighted digital data at a non-charge- 
able level without enciphering, and additional data 
(AD) required for accounting are transmitted from a 
contents provider (100') to at least one user termi- 
nal (200*. 300') over a network. 

8. The copyrighted digital data management method 
according to claim 7 wherein, after said user termi- 
nal (200', 300') executes a data usage accounting 
procedure for said contents provider (100*), said 
contents provider (100') transmits decryption key 
data (Kd) for deciphering said enciphered copy- 
righted digital data (K(D)) to said user terminal 
(200\ 300') over the network. 

9. The copyrighted digital data management method 
according to claim 8, wherein said user terminal 
(200', 300') is allowed to reproduce the digital sam- 
ple preview data (S(D)) but, to reproduce the enci- 
phered copyrighted digital data (K(D)), is required 
to obtain the decryption key data (Kd) from said 
contents provider (100*) and then decipher the enci- 
phered copyrighted digital data (K(D)) with the 
decryption key data (Kd). 

1 0. A contents provider (1 00) comprising: 

receiving means (1) for receiving a data usage 
accounting procedure from a user terminal 
(200); and 

transmitting means (15) for transmitting enci- 
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phered copyrighted digital data (K(D)) gener- 
ated by enciphering ^chargeable copyrighted 
digital data (D) using encryption key data (K), 
digital sample preview data (S(D)) generated 
from an outline of the copyrighted digital data at 5 
a non-chargeable level without enciphering, 
decryption key data (Kd) for deciphering the 
enciphered copyrighted digital data, and addi- 
tional data (AD) required for accounting to said 
user terminal (200) over a network, said data w 
being all transmitted when said data usage 
accounting procedure is received from said 
user terminal (200). 

11. A contents provider (100') comprising transmitting 75 
means for transmitting enciphered copyrighted dig- 
ital data (K(D)) generated by enciphering chargea- 
ble copyrighted digital data (D) using encryption 
key data (K), digital sample preview data (S(D)) 
generated from an outline of the copyrighted digital 20 

Sbata at a non-chargeable level without enciphering, 
ftnd additional data (AD) required for accounting, to 
at least one user terminal (200', 300') over a net- 
work. 

25 

12. The contents provider (100') according to claim 1 1 , 
further comprising: 

receiving means for receiving a data usage 
accounting procedure from said user terminal 30 
(200', 300'), wherein, when said accounting 
procedure is received from said user terminal, 
said transmitting means transmits decryption 
key data (Kd) for deciphering said enciphered 
copyrighted digital data (K(D)) to said user ter- 35 
minal (200', 300') over the network. 

13. A user terminal (200) comprising: 

transmitting means (20) for transmitting a data 40 
usage accounting procedure to a contents pro- 
vider (100); 

receiving means (21) for receiving enciphered 
copyrighted digital data (K(D)) generated by 
enciphering chargeable copyrighted digital 45 
data (D) using encryption key data (K), digital 
sample preview data (S(D)) generated from an 
outline of the copyrighted digital data at a non- 
chargeable level without enciphering, decryp- 
tion key data (Kd) for deciphering the enci- so 
phered copyrighted digital data, and additional 
data (AD) required for accounting, from said 
contents provider (1 00) over a network after the 
accounting procedure is executed for said con- 
tents provider ( 1 00); 55 
recording means (23) for recording in a data 
recording means (24) the enciphered copy- 
righted digital data, digital sample preview 



data, decryption key data, and additional data 
received by said receiving means; 
reproducing means for reproducing the digital 
sample preview data recorded in said data 
recording means; and 

deciphering means (29) for deciphering the 
enciphered copyrighted digital data recorded in 
said data recording means. 

14. The user terminal (200) according to claim 13, 
wherein, out of the data recorded in said data 
recording medium (24), the enciphered copyrighted 
digital data (K(D)), digital sample preview data 
(S(D)), and additional data (AD) may be copied to 
other user terminals (300). 

15. A user terminal (200', 300') comprising: 

receiving means for receiving enciphered cop- 
yrighted digital data (K(D)) generated by enci- 
phering chargeable copyrighted digital data (D) 
using encryption key data (K), digital sample 
preview data (S(D)) generated from an outline 
of the copyrighted digital data at a non-charge- 
able level without enciphering, and additional 
data (AD) required for accounting, from a con- 
tents provider (100') over a network; 
recording means for recording the enciphered 
copyrighted digital data, the digital sample pre- 
view data, and the additional data in a data 
recording means; 

reproducing means for reproducing the digital 
sample preview data recorded in said data 
recording means; 

transmitting means for transmitting a data 
usage accounting procedure to said contents 
provider (100'); and 

deciphering means for deciphering the copy- 
righted digital data (K(D)) using decryption key 
data (Kd) after said transmitting means trans- 
mits the accounting procedure to said contents 
provider (100*) and, in response, said receiving 
means receives from said contents provider 
the decryption key data (Kd) for deciphering 
the enciphered copyrighted digital data (K(D)) 
over the network. 

16. A data recording medium (24) recording therein 
enciphered copyrighted digital data (K(D)) gener- 
ated by enciphering chargeable copyrighted digital 
data (D) using encryption key data (K), digital sam- 
ple preview data (S(D)) generated from an outline 
of the copyrighted digital data at a non-chargeable 
level without enciphering, decryption key data (Kd) 
for deciphering the enciphered copyrighted digital 
data, and additional data (AD) required for account- 
ing. 
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